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What is claimed is: 

1 . A method for maintaining computer security comprising: 
providing a signature file; 

receiving an incoming message from at least one client computer; 

comparing the received incoming message with the signature file to determine whether 
the incoming message is malicious; and 

blocking the incoming messages determined to be malicious from reaching a web server. 

2. The method of claim 1, wherein the comparing further comprises: 
parsing the incoming message; 

converting the incoming message into an internal format; 

comparing the converted incoming message with the signature file; and 

determining whether the converted incoming message is malicious based on the 
comparison. 

3. The method of claim 2, further comprising reassembling the converted incoming 
message back into its original format prior to forwarding it to the web server if it is determined 
that the code is not malicious. 
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4. The method of claim 3, further comprising forwarding the reassembled message to the 
web server. 

5. The method of claim 1, wherein the signature file contains information about 
5 known system vulnerabilities. 

6. The method as claimed in claim 1, wherein the signature file is made available 
through a web server. 

10 7. The method as claimed in claim 1 , further comprising continuously updating the 

signature file. 

8. The method as claimed in claim 1 , further comprising periodically downloading 
the signature file in order to make its copy current. 

15 

9. A system for maintaining computer security comprising: 
a signature file; 

a web server; and 

a proxy machine receiving an incoming message from at least one client computer, 
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comparing the received incoming message with the signature file to determine whether 
the incoming message is malicious and blocking incoming messages determined to be 
malicious from reaching the web server. 

5 10. The system of claim 9, wherein the proxy machine further comprises: 

an HTTP message parser module for receiving, parsing and converting the incoming 
messages into a defined format; 

an HTTP message analyzer module for comparing the converted incoming messages with 
the signature file; and 

10 an HTTP message reassembly module for reassembling the converted incoming 

messages determined not to be malicious into their original format and forwarding them to the 
web server. 

1 1 . The system of claim 9, wherein the signature file contains information about 
15 known system vulnerabilities. 

1 2. The system of claim 9, wherein the signature file is made available through a web 

server. 

20 13. The system of claim 9, wherein the signature file is continuously updated. 
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14. The system of claim 9, wherein the proxy machine periodically downloads the 
signature file in order to make its copy current. 

5 15. The system of claim 1 0, wherein the signature file is linked to the HTTP message 

analyzer module. 

16. A computer storage medium including computer executable code for maintaining 
computer security, comprising: 

10 code for accessing a signature file; 

code for receiving an incoming message from at least one client computer; 

code for comparing the received incoming message with the signature file to determine 
whether the incoming message is malicious; and 

code for blocking the incoming messages determined to be malicious from reaching a 
1 5 web server. 

1 7. The computer recording medium of claim 16, further comprising: 
code for parsing the incoming message; 

code for converting the incoming message into an internal format; 
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code for comparing the converted incoming message with the signature file; and 

code for determining whether the converted incoming message is malicious based on the 
comparison. 

18. The computer recording medium of claim 17, further comprising code for 
reassembling the converted incoming message back into its original format if it is determined that 
the code is not malicious. 

1 9. The computer recording medium of claim 1 8, further comprising code for forwarding 
the reassembled message to the web server. 

20. The computer recording medium of claim 1 6, wherein the signature file contains 
information about known system vulnerabilities. 

21 . The computer recording medium of claim 16, wherein the signature file is made 
available through a web server. 

22. The computer recording medium of claim 16, further comprising code for 
continuously updating the signature file. 
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23. The computer recording medium of claim 16, further comprising code for 
periodically downloading the signature file in order to make its copy current. 

24. The method of claim 1, wherein the incoming message comprises an HTTP 
5 messages. 

25. The system of claim 9, wherein the incoming message comprises an HTTP 
messages. 

10 26. The computer storage medium of claim 16, wherein the incoming message 

comprises an HTTP message. 
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